Issue
After adding an IWSVA server to the network in bridge mode, IWSVA receives traffic
from one network device, scans it, and delivers it to another device for routing as
usual. The device's client-policies will stop being applied.
For example, if you add IWSVA to the network as follows:
client < router < IWSVA < FTP server
The FTP server will no longer "see" the IP address of the requesting client. As a
result, and IP address-based policies (e.g. Accept/Deny requests) will be lost. In
addition to a FTP server, network devices may include a firewall, Web server, etc.
Solution
To avoid this issue, configure the FTP server to Allow the IWSVA server. Alternatively,
you can "move" the Accept/Deny policy settings from the FTP server to the IWSVA server
for enforcement.
